SBS2011 initiated a shutdown unexpectedly. I trying to identify why the server suddenly shutdown.
Found in Event Log:
Log Name: System - Source = USER32, Event ID = 1074
The process c:\windows\system32\winlogin.exe (SBSERVER) has initiated the power off of computer SBSERVer on behalf of user NT AUTHORITY\SYSTEM for the following reason" No title for this reason could be found
Reason code 0x500ff
Shutdown Type: power off
Prior to this I found an event log for:
System /source = WAS/Event Id= 5117
A worker process with a process id of "21708" serving application pool "WsusPool" has requested a recycle because it has reached it's private memory limit
Could the WAS issue caused the shutdown?